+--rw role-based-access-control

+--rw config

| +--rw enable? empty

+--ro state

| +--ro enable? empty

+--rw policies

| +--rw policy* [policy-name]

| +--rw policy-name -> ../config/policy-name

| +--rw config

| | +--rw policy-name? string

| +--ro state

| | +--ro policy-name? string

| +--rw rules

| +--rw rule* [rule-name]

| +--rw rule-name -> ../config/rule-name

| +--rw config

| | +--rw rule-name? cml-data-types:cml_line_t

| | +--rw rule-type ipi-role-based-access-control-types:rbac_rule_type_t

| | +--rw command-mode* string

| +--ro state

| +--ro rule-name? cml-data-types:cml_line_t

| +--ro rule-type ipi-role-based-access-control-types:rbac_rule_type_t

| +--ro command-mode* string

+--rw roles

+--rw role* [role-name]

+--rw role-name -> ../config/role-name

+--rw config

| +--rw role-name? string

| +--rw default-policy? ipi-role-based-access-control-types:rbac_default_rule_type_t

+--ro state

| +--ro role-name? string

| +--ro default-policy? ipi-role-based-access-control-types:rbac_default_rule_type_t

+--rw policies

+--rw policy* [policy-name]

+--rw policy-name -> ../config/policy-name

+--rw config

| +--rw policy-name? -> /role-based-access-control/policies/policy/policy-name

+--ro state

+--ro policy-name? -> /role-based-access-control/policies/policy/policy-name